Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: wgFWyUTzyzS9EU9HQG30qz06fBXUJg4CyYwj74CtEqw=
Subject key identifier: 21:52:8F:2D:EA:DB:D3:42:D7:70:76:C8:86:1B:04:17:3B:7C:0F:A5
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019D9B50C78404388EDC5F9924D2E79858FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0BC1
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: h2JglRJKRxDNmY8TOHsE+j71+yDlVlyPChZ/nkPkC1M=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c7:84:04:38:8e:dc:5f:99:24:d2:e7:98:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=21528f2deadbd342d77076c8861b04173b7c0fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:92:61:5b:e1:57:60:b5:32:dd:c9:79:af:
4a:72:ea:f2:74:52:3d:e4:d0:2d:63:15:af:3a:7d:
9e:30:75:a7:b4:74:c3:97:f9:06:d9:86:ca:f7:8c:
ac:56:f0:64:bd:af:64:d0:16:22:f8:ff:2a:2e:d3:
62:2e:cf:10:f8:c8:55:9d:78:a3:77:01:60:f4:ed:
a9:b6:42:75:d0:3f:8c:28:de:ea:33:da:c0:76:9b:
47:15:cd:f1:b9:20:bb:4c:f4:12:cc:b9:66:3a:af:
8c:04:b5:d4:46:81:7e:97:30:87:dc:d3:da:10:b5:
46:3b:a8:c9:90:4f:01:36:a1:91:eb:a0:0c:21:df:
ad:bd:42:d9:28:df:03:b1:8e:97:7b:92:3b:59:42:
0e:af:40:a3:2a:71:60:e0:d5:d3:7f:f6:da:c0:32:
84:1a:45:01:d2:56:54:18:6b:0a:5b:3d:e6:84:93:
d4:f6:d3:b8:4f:61:5c:67:f6:a3:79:fe:f0:fa:b2:
45:19:37:bb:ec:f7:3b:aa:b7:44:99:be:16:bc:c9:
8b:c0:af:15:ba:54:b0:5a:07:55:1c:56:57:3a:51:
b9:1a:20:b4:30:f2:9c:7e:dc:28:6c:f2:d0:83:10:
95:be:c2:33:2e:5c:19:31:f3:b1:c8:6e:f9:7c:0e:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:8F:2D:EA:DB:D3:42:D7:70:76:C8:86:1B:04:17:3B:7C:0F:A5
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:dd:9e:86:7e:41:cf:a8:f2:66:8e:98:15:27:37:91:c3:b6:
5b:29:d9:19:e8:98:86:41:cd:f6:3c:94:8d:5c:2c:b8:b4:16:
ff:08:aa:54:9c:1d:6e:ab:0e:27:96:3b:81:75:6b:83:d6:e6:
72:c6:0d:5d:ed:a1:20:fa:7b:99:37:d0:06:a7:ef:d8:c9:c2:
3c:85:ac:35:b4:12:9d:79:c8:b5:86:ab:5c:c5:38:d0:10:90:
78:ad:33:be:84:7d:46:a6:3e:ce:d7:21:59:e1:a5:78:3f:4c:
9b:8c:b9:f0:65:f1:4d:e4:c4:50:9f:0e:56:9d:67:00:9c:6a:
8f:c8:30:ae:d3:a7:35:0b:d6:b1:37:d0:e3:17:24:4a:36:8e:
6c:34:2b:cd:89:ef:97:92:89:45:5b:8e:a2:30:64:69:2f:12:
cc:6d:50:89:b4:a6:66:d6:28:d1:db:45:48:7d:8b:49:5f:1f:
c7:06:77:51:68:3e:db:88:20:c2:53:b3:e1:31:fa:42:b1:22:
5c:4d:96:59:e4:b7:da:fd:fb:3f:7f:44:ed:05:36:f2:05:7b:
ad:06:bb:10:29:59:b0:51:8c:17:fb:a5:57:c3:29:c8:5a:f9:
f7:e5:1f:dd:bf:2b:ff:99:06:16:03:38:e5:fa:30:36:43:51:
ab:e6:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:37 2026 by rpki-client